Does Your ISP Sell Your Browsing Data? What Providers Collect and How to Opt Out

If you’ve searched “does my ISP sell my data," the answer is more specific than a flat yes or no. Internet providers collect a lot of information about how you use your connection, and most large providers share some of it with advertising partners.

Whether that counts as a “sale," what’s included, and how much control you have varies by company, and current rules give you more room to opt out than most privacy guides fully mention.

[search_block]

What Does ISP Data Collection Actually Involve?

Internet providers see more than the websites you visit. A 2021 Federal Trade Commission staff report on six major providers, including AT&T, Charter, Comcast, and Verizon, found that ISP data collection often extends well beyond what’s needed to deliver service—combining browsing activity, app usage, and location data into targeted advertising profiles, and in some cases grouping customers by sensitive categories like race or sexual orientation [1].

So while the “do internet providers sell your data" question implies a single yes-or-no policy, the more accurate picture is that most large providers monetize customer data through advertising partnerships and analytics reporting, even when they don’t hand over information that directly identifies you by name.

Can My ISP See My Browsing History?

Technically, yes and no. Every time your device looks up a website, it typically sends a DNS query first, and your ISP can see that lookup unless you’re using encrypted DNS. Your ISP can also see the IP address of every site you connect to, along with the timing, duration, and volume of that connection, even when the connection itself is encrypted. What it generally cannot see is the content of an HTTPS connection, such as the specific pages you load, the search terms you type, or the messages you send.

That’s the difference between an ISP knowing you connected to a banking site at 9:14 p.m. for six minutes, and knowing which account you checked once you got there.

What Rights Do You Have Under CPNI and State Privacy Laws?

Customer Proprietary Network Information, or CPNI, is a federally protected category covering call and connection records, and it has historically applied most clearly to phone service. Whether it extends the same way to broadband is unsettled, though, The FCC has reclassified broadband between light-touch and common-carrier oversight several times in the past decade, most recently reinstating stronger classification in 2024 before a federal appeals court struck that down in 2025 [2]. That means CPNI internet provider protections you may read about elsewhere aren’t as settled at the federal level as they sound.

State law has filled some of the gap. California’s Consumer Privacy Act applies to broadband providers over its revenue or data thresholds, giving residents the right to opt out of the sale or sharing of their information, and states including Washington, Oregon, Colorado, and Vermont have their own broadband privacy or net neutrality statutes [3].

What Do Xfinity, AT&T, and Spectrum Actually Do With Your Data?

Every ISP privacy policy reads differently, but the three largest fixed providers show the range of practices.

• Xfinity data collection centers on using account and usage information for personalized advertising and analytics. Xfinity’s privacy policy states it does not sell information that directly identifies a customer, but it does disclose non-identifying data, like IP addresses or device identifiers, to third-party advertising partners, and shares data with other Comcast-owned businesses such as NBCUniversal [4]. Customers can opt out of some of this sharing through the Xfinity Privacy Center.
• Does AT&T sell browsing data? It depends on the program a customer is enrolled in. AT&T’s basic “Personalized" program, on by default, uses demographic data to serve more relevant ads. Its opt-in “Personalized Plus" program goes further, using precise location, web browsing data collected as an internet service provider, and CPNI, and sharing that data with third parties for advertising [5]. Customers who never opt in aren’t included in Personalized Plus.
• Spectrum privacy practices, run by Charter Communications, follow a similar pattern. Spectrum shares information with third-party service providers, affiliates, and advertising partners, and offers opt-out tools through its privacy preferences center, including a California-specific “do not sell or share" option [6].

How to Stop ISP From Tracking You

You can’t make your ISP blind to your connection metadata, but you can opt out ISP data sharing tied to advertising and shrink what else it collects:

• Switch to encrypted DNS. Enabling DNS-over-HTTPS or DNS-over-TLS, an option most browsers now offer by default, keeps DNS lookups from being visible to your ISP.
• Visit your provider’s opt-out settings. Xfinity, AT&T, and Spectrum all offer privacy dashboards for limiting advertising-related sharing without affecting service.
• Use a VPN for what matters most. There’s a trade-off behind ISP VPN privacy. The VPN hides your browsing destinations from your ISP, but the VPN provider can now see what your ISP used to see. Trust changes hands, rather than eliminating it.
• Ask about CPNI restrictions directly. Providers are still required to let you restrict certain CPNI uses on request [7].

If privacy is a big factor, it’s worth building that into how you compare internet providers. Speed and internet prices aren’t the only variables that differ by company—data practices do too, so a broader internet comparison of the best internet providers, alongside a look at the best internet in your area, helps before you compare internet plans and sign a contract.

Use the zip code tool below to see what providers might be available in your area.

[search_block]

FAQs

Does ISP track websites visited by every device on my home network?

Yes, in a limited sense. Your ISP can typically see the IP addresses you connect to and connection timing, plus DNS lookups if you’re not using encrypted DNS. It generally cannot see the specific pages or content you view on HTTPS sites.

Can I opt out of ISP data collection entirely?

Not entirely. ISPs need some data, like connection logs, to operate your service. You can typically opt out of advertising and marketing-related sharing through your provider’s privacy settings, which meaningfully limits use beyond delivering the service itself.

Does using a VPN stop my ISP from collecting data?

A VPN hides your browsing destinations and traffic content from your ISP, but your ISP can still see that you’re connected to a VPN and how much data you’re using. It also shifts visibility to the VPN provider rather than eliminating collection.

Is it illegal for ISPs to sell my data?

Not categorically. No single federal law bans ISPs from sharing or monetizing customer data, though most large providers say they don’t sell information that directly identifies you. State laws like California’s CCPA, and CPNI protections where they apply, give you specific rights to restrict sharing.

Sources

[1] Federal Trade Commission. “A Look at What ISPs Know About You: Examining the Privacy Practices of Six Major Internet Service Providers."

[2] BroadbandSearch. “The Latest on Net Neutrality – Where Are We In 2026."

[3] EPIC. “State Broadband Privacy Legislation."

[4] Comcast. “Xfinity Privacy Policy."

[5] AT&T. “AT&T Personalized Plus Terms of Service."

[6] Charter Communications. “Protecting Privacy Online."

[7] ACLU. “What Individuals Should Do Now That Congress Has Obliterated the FCC’s Privacy Protections."

Related Posts